bake htpasswd from build arg, security hardening, fix home routing

Dockerfile

@@ -27,7 +27,11 @@ COPY src/api/templates           /var/www/html/api/templates/
 COPY src/api/components          /var/www/html/api/components/
 COPY src/api/data                /var/www/html/api/data/
 
-RUN chown -R www-data:www-data /var/www/html
+ARG HTPASSWD_HASH
+RUN echo "bigbreath:${HTPASSWD_HASH}" > /etc/nginx/.htpasswd
+
+RUN chown -R www-data:www-data /var/www/html \
+    && echo 'expose_php = Off' > /usr/local/etc/php/conf.d/security.ini
 
 ENV SEND_FROM_EMAIL="" \
     SEND_TO_EMAIL="" \